Administrator Accounts; Overview; Default Administrator Account; Additional Administrator Accounts - TANDBERG Video Communication Server Administrator's Manual

Grey Headline (continued)

Administrator accounts

Default administrator account

The VCS has a default administrator account with full read-write
access. This account is used to log into the VCS using the web
interface or the CLI. The username for this account is
lower case) and the default password is
case).
You cannot delete the default administrator account or change
its admin username, but you should change the password as
soon as possible. Choose a strong password, particularly if
administration over IP is enabled.
You will receive a warning if the password for the
account has not been changed from the default.
If you forget the password for the
still log in as another administrator user with
access and change the password for the
If you do not have any other such administrator users set up, or
you have forgotten those passwords as well, it is possible to
reset the password for the admin account as long as you have
physical access to the VCS. See the section
forgotten administrator or root password

Additional administrator accounts

You can add up to 15 additional administrator accounts with
either read-write access or read-only access. These can be used
to log in using the web interface only.
The Configuration Log records all login attempts and
configuration changes made using the web interface, and
can be used as an audit trail. This is particularly useful
when you have multiple administrator accounts.
Overview and
Introduction Getting started
status
D14049.05
February 2009

Overview

Administrator password security

The Password security
> Password security) allows you to determine whether or not
admin (all administrator passwords and the root password must meet a
TANDBERG (all upper minimum level of complexity before they are accepted.
Administrator passwords are configured using the
Administrator accounts
Administrators > Administrator
New or View/Edit).
admin
If Enforce strict passwords
configured administrator passwords and root passwords must
contain at least 15 ASCII characters made up of at least:
•
admin account, you can 2 lowercase letters ['a'..'z']
read-write
•
2 uppercase letters ['A'..'Z']
admin account.
•
2 numeric values ['0'..'9']
•
2 special characters [e.g. '@', '$']
If you change
Resetting a
receive a warning if any existing administrator accounts or the
for details.
root account have passwords that do not meet the security
requirements.
If Enforce strict passwords
on administrator passwords.
. The Enforce strict passwords
administrator passwords and the password for the
account
used on the VCS such as in the local authentication database,
LDAP server, external registration credentials or FindMe
passwords.
You cannot set a blank password for any administrator
account.
System VCS
configuration configuration
page (Maintenance > Administrators
page (Maintenance >
accounts, and then click
is set to On, all subsequently
Enforce strict passwords from Off to On, you will
is set to Off, no checks will be made
setting affects
only. It does not affect any other passwords
Zones and Call Bandwidth
neighbors processing
160
TANDBERG

Adding and editing an administrator account

To add a new administrator account:
• Maintenance > Administrators > Administrator accounts
You will be taken to the Administrator accounts
Click New.
You will be taken to the Create administrator account
To change the name, password or access level for an existing
administrator account:
•
Maintenance > Administrators > Administrator accounts
You will be taken to the Administrator accounts
Click on the name of the account you wish to edit.
You will be taken to the Edit administrator account
See the Supported characters
of characters allowed in these fields.
The options are:
Name
The username for the administrator account. This field is case-
senstive.
Password
Enter the password that this administrator will use to log in to
the VCS. The password can be up to 16 characters.
All passwords on the VCS are encrypted, so you will only see
placeholder characters here.
Confirm Password
Retype the password entered above.
Account access
root
Determines the rights for this account. The options are:
•
Account disabled : This account can not currently be used.
•
Read-only : this account will be able to view the current
status and configuration of the VCS using the web interface,
but cannot make any changes. Some pages, such as the
Upgrade page, are blocked to
•
Read-write : this account will have full access to view and edit
all configuration available using the web interface..
Firewall
Applications
control traversal
VIDEO COMMUNICATIONS SERVER
ADMINISTRATOR GUIDE
.
page.
page.
.
page.
page.
section for a complete list
Read-only accounts.
Maintenance Appendices